Schema: Security Related Tables


All users who use TMAJ are put into the Users table, where they are given a username and password.

ArrayBuilder Application: Restricting User-Access To ArrayBlocks.


The Arraybuilder application allows users to design there own ArrayBlocks.  TMAJ enables an administrator to limit a user's access to certain arrayBlocks.


Schema relating to table UsersArrayBlocks.  The table UsersArrayBlocks associates UserIDs with ArrayBlockIDs.  This allows TMAJ to assign certain users to certain ArrayBlocks.


Image ManagerApplication: Restricting Access to Scans



Users are assigned to certain Projects.



In turn, ArraySlides are assigned to Projects. In fact, a project is defined as a collection of arraySlides.



Depending on what array-slides a user may access, it controls what scans a user may access, as well as what sessions a user may create.  Sessions are defined as a user scoring a scan.  Users can't create sessions for scans for which they don't have access.  (We know what ArraySlides a user may access because users are related to projects, and projects are related to array-slides.)


If a user is a group-admin and has access to the ArrayManager application, they can only see projects to which they have been assigned (This is done using the ProjectsArraySlides table.)  The ArraySlides that a user has access to is actually the union of the arraySlides in the ProjectsArrayslides table AND the array-slides that are from the array-blocks in the UsersArrayBlocks project.  (Remember that an ArrayBlock contains multiple ArraySlides.)


Specimens Application: Controlling Access To Specimens, Blocks, and TissueDiagnosis


The data input application allows users to enter and modify Specimens, Blocks, and TissueDiagnosis.
Whenever a user enters a new specimen, an entry is added to the UsersSpecimens table showing that that user has access to the specimen.  Alternatively, an admin may assign users to specimens as well.


UsersSpecimens table-related schema.  The table UsersSpecimens allows TMAJ to restrict user access to certain specimens.  Since Blocks are related to Specimens, and TissueDiagnosis to Blocks, the administrator also in-effect controls which Blocks and TissueDiagnosis a user can view.




Group Admins Support: The UsersUsers Table

The UsersUsers table was added to support group-admins.  Full admins have control over every user; however, group admins only control a subset of all the users.  Group Admins can only change user information for users they have been assigned.  Another admin can assign a group-admin new users (only users to which the assigning admin has access).  Also, whenever group admins add a new user, they automatically get assigned that user.  When a admin user is assigned another user, that means a record is added to the UsersUsers table, and that they will be able to control the security settings for that user.


The UsersUsers table.  This gives AdminUsers (group-admins) access to only a subset of the users in tmaj.


© Copyright 2009 | All Rights Reserved | The Johns Hopkins University